EUVD-2008-6149

Malware in sbrugna...

Sql injection

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

CVE-2008-6179

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

CVE-2008-6179

CVE-2008-6179 describes an SQL injection in sug_cat.php of IndexScript 3.0. The root cause is improper handling of the parent_id parameter, enabling remote attackers to inject arbitrary SQL. This is a different vector from CVE-2007-4069. The connected PRION/NVD entries confirm the same vulnerabil...

IndexScript 3.0 - 'parent_id' SQL Injection

------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet easy-to-use directory script that you can...